CVE-2016-3632: High severity tiff vulnerability
Out-of-bounds write vulnerability was found in TIFFVGetField function in tifdirinfo.c, allowing attacker to cause a denial of service or command execution via a crafted TIFF image.
Vulnerable code:
libtiff/tifdir.c:1073 1068 if (fip->fieldtype == TIFFASCII 1069 || fip->fieldreadcount == TIFFVARIABLE 1070 || fip->fieldreadcount == TIFFVARIABLE2 1071 || fip->fieldreadcount == TIFFSPP 1072 || tv->count > 1) { 1073 vaarg(ap, void ) = tv->value; 1074 retval = 1;
Public via:
http://seclists.org/oss-sec/2016/q2/33
Upstream bug: http://bugzilla.maptools.org/showbug.cgi?id=2549
Other sources
The TIFFVGetField function in tifdirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3632?
CVE-2016-3632 is classified as a high severity vulnerability due to its potential to cause denial of service or arbitrary command execution.
How do I fix CVE-2016-3632?
To fix CVE-2016-3632, it is recommended to update to the latest version of the libtiff library that addresses this vulnerability.
Which software is affected by CVE-2016-3632?
CVE-2016-3632 affects libtiff versions up to 4.0.6 and specific versions of Oracle VM Server.
What type of vulnerability is CVE-2016-3632?
CVE-2016-3632 is an out-of-bounds write vulnerability that can be exploited via crafted TIFF images.
Can CVE-2016-3632 lead to remote code execution?
Yes, CVE-2016-3632 can allow attackers to execute commands remotely by crafting malicious TIFF files.